


CrowdStrike Falcon Insight XDR and Comodo Advanced Endpoint Protection are contenders in the endpoint protection space. CrowdStrike seems to have the upper hand with superior endpoint detection and response capabilities, contributing to a robust security posture.
Features: CrowdStrike Falcon Insight XDR is known for its remotely accessible EDR capabilities, complete endpoint visibility, and rapid threat containment. Its behavior-based alerts and lightweight agent ensure minimal system performance impact. Users value the easy integration, customizable dashboards, and AI-driven threat detection. Comodo's strengths include its advanced containment technology, zero-day protection, and sandbox environment for running applications safely, ensuring that user activity isn't disrupted. It leverages AI for threat hunting and provides effective ransomware protection.
Room for Improvement: CrowdStrike Falcon Insight XDR could benefit from enhanced dashboard functions, improved reporting, decreased false positives, and better legacy system support. There is also room for improvement in integration capabilities, pricing, and additional features like device control and firewall management. Comodo Advanced Endpoint Protection needs to lower its performance impact during scans and enhance its DLP integration. Additionally, there is a need for improved support response times and more user-friendly documentation.
Ease of Deployment and Customer Service: CrowdStrike Falcon Insight XDR is mostly used across cloud environments, offering scalability, but its technical support has occasionally faced criticism for delayed responses. Users have mixed experiences, with some proactive support and some slow resolutions. Comodo Advanced Endpoint Protection also supports cloud deployments but needs improvements in delivering faster customer service. Both solutions are generally easy to deploy, but levels of personalized customer service can vary.
Pricing and ROI: CrowdStrike Falcon Insight XDR is seen as a premium product with extensive features providing good value primarily for large enterprises, although it may be costly for smaller businesses. Despite this, the efficiency and security it offers contribute to a positive ROI. Comodo Advanced Endpoint Protection, on the other hand, is recognized for its competitive pricing and cost-effectiveness, making it attractive to budget-conscious users. Both solutions provide significant ROI through enhanced security and reduced operational burdens.
They appreciate the rich telemetry data from the solution, as it provides in-depth threat identification.
Cortex XDR by Palo Alto Networks helps to reduce my total cost of ownership significantly.
In Cortex XDR by Palo Alto Networks, most of the remediation is automated and the accuracy is quite good.
Without this type of solution, work becomes hampered and files become inaccessible.
CrowdStrike Falcon saves time and offers good value for money, especially for enterprise companies, because it can stop breaches.
It's very easy to deploy without many IT admins, saving time.
The technical support from Palo Alto deserves a mark of ten because they reach out within an hour whenever assistance is needed.
There is no back and forth, and they know what we are asking for and come up with the best resolution for a solution.
If any of these services are missed, it becomes a problem in terms of support tickets, follow-up, or special configuration that needs to be done in the system.
Customer support is generally satisfactory but could be improved, especially in terms of response time.
On a scale of one to ten, I would rate the technical support as a 10 because they resolve many issues for us.
The CrowdStrike team is very efficient; I would rate them ten out of ten.
They could improve by initiating calls for high-priority cases instead of just opening tickets.
You can onboard 10,000 endpoints in just hours, which demonstrates the excellent scalability of this product.
Activating the newly purchased licenses is instantaneous, allowing installations without adjustments since it's cloud-based.
Cortex XDR by Palo Alto Networks can be expanded anytime by purchasing another license without any issues related to scalability.
It has adequate coverage and is easy to deploy.
In terms of scalability, I find CrowdStrike to be stable, and I have not encountered any limitations with it.
There's no scalability limitation from CrowdStrike itself, as it just requires agent deployment.
Cortex remains fast and responsive, even with increasing data and alerts.
The thresholds we've seen on our firewall boxes at some instances reached 80% to 85%, but even at that level of utilization, we don't observe any latency or any issues reported with respect to accessing the application.
Cortex XDR by Palo Alto Networks can be trusted completely.
When deploying on old PCs, servers, or laptops, optimal performance cannot be expected.
The stability of Comodo Advanced Endpoint Protection is rated at ninety-five to ninety-seven percent.
I have never seen instability in the CrowdStrike tool.
We are following N-1 versions across our environment, which is stable.
The biggest issue occurred when every computer worldwide experienced a blue screen.
Improving reporting and dashboard customization, along with the addition of real-time and exportable reports, would help SOC teams greatly.
The inclusion of this feature would allow the application of DLP policies alongside antivirus policies via a single agent and console, making it more competitive as other OEMs often offer DLP solutions as part of their antivirus products.
If the per GB data could be provided at a certain level free of cost or at the same cost which the customer is taking for the entire bundle, that would be better.
Comodo Advanced Endpoint Protection could improve by extending its auto containment feature to Mac and Linux systems since it currently only supports Windows.
The main areas for improvement are support responsiveness and the additional enhancement with the DLP integration.
Simplifying the querying process, such as using double quote queries or directly obtaining logs based on IP addresses or usernames, would be beneficial.
Another concern is CrowdStrike's GUI. It changes annually, making it hard to work and find options.
Threat prevention should be their first priority.
The pricing on SentinelOne is far more reasonable and cheaper than Cortex XDR by Palo Alto Networks.
I would say it is definitely not a cheap product, considering how mature it is and how scalable all Palo Alto products are together.
Compared to CrowdStrike, which is very costly, and SentinelOne, which is also very costly, Cortex XDR by Palo Alto Networks is a medium cost-efficient solution.
Pricing is competitive and considered average compared to other solutions.
It is expensive compared to SentinelOne, but as the market leader, it is worth it.
The licensing cost and setup costs are affordable.
The solution is a bit expensive.
It incorporates AI for normal behavior detection, distinguishing unusual operations.
The product provides automation responses in case of a threat attack, severity assessments, centralized manageability, and comprehensive compliance features, resulting in reduced costs.
It includes machine learning to easily analyze data and detect complex threats across endpoints, networks, or clouds.
It includes an auto containment feature, ensuring files and folders remain secure.
If anything happens or any suspicious activities are detected, an alert is generated, allowing for quick response.
I can investigate by accessing the customer's host based on the RTR environment and utilize host search to know details for the past seven days, including logins, processes, file installations, malicious processes, and network connections.
The real-time analytics aspect of CrowdStrike performs well because we get all logs in real-time, with no delay, allowing us to take action immediately.
Being an EDR solution, it helps us identify attacks in real-time.
| Product | Mindshare (%) |
|---|---|
| CrowdStrike Falcon | 5.8% |
| Cortex XDR by Palo Alto Networks | 3.9% |
| Comodo Advanced Endpoint Protection | 0.8% |
| Other | 89.5% |


| Company Size | Count |
|---|---|
| Small Business | 46 |
| Midsize Enterprise | 21 |
| Large Enterprise | 54 |
| Company Size | Count |
|---|---|
| Small Business | 15 |
| Midsize Enterprise | 1 |
| Large Enterprise | 1 |
| Company Size | Count |
|---|---|
| Small Business | 54 |
| Midsize Enterprise | 34 |
| Large Enterprise | 63 |
Cortex XDR by Palo Alto Networks provides advanced threat detection with AI-driven endpoint protection and seamless integration, ensuring multi-layered security and automatic threat response.
Cortex XDR is designed to safeguard endpoints against malware and suspicious activities. It offers advanced threat detection and response capabilities using behavioral analysis, AI, and machine learning. It seamlessly integrates with security infrastructures, providing endpoint security, firewall integration, and enhanced visibility in both cloud-based and on-premises environments.
What are the key features of Cortex XDR?Organizations in diverse sectors deploy Cortex XDR to protect against malware, leveraging its advanced threat detection capabilities. Its integration with existing security infrastructures appeals to those seeking comprehensive protection in both cloud and on-premises environments, providing enhanced visibility and threat intelligence.
Comodo Advanced Endpoint Protection offers robust cybersecurity with AI-driven threat detection, sandboxing, and auto containment features that protect networks from ransomware, malware, and advanced threats, providing stability and easy scalability.
Comodo Advanced Endpoint Protection delivers comprehensive defense against cyber threats with its advanced capabilities. It enhances network security with sandbox and auto containment, targeting ransomware, Trojans, and persistent threats. It integrates seamlessly with applications, supports remote management, and offers patch management alongside its AI-driven detection. Its Zero Day capabilities and open-source EDR bolster its defense mechanisms. Although it faces challenges like high resource consumption and agent performance issues, it remains valuable for safeguarding company and personal devices.
What makes Comodo Advanced Endpoint Protection effective?In industries like finance and healthcare, Comodo Advanced Endpoint Protection is deployed to maintain stringent security measures, protecting sensitive data and ensuring compliance. Organizations use it for endpoint protection and data loss prevention, leveraging its cloud-based solutions for remote management and patch updates.
CrowdStrike Falcon Insight XDR provides adversary-driven detection and response across endpoints and beyond. It combines AI-powered endpoint detection and response with integrated threat intelligence and expert context to deliver high-quality, context-rich detections that help security teams identify and prioritize sophisticated threats.
Automated leads and Charlotte AI, combined with attack-path visibility, adversary context and MITRE ATT&CK mappings, help analysts investigate incidents faster. Real Time Response and Falcon Fusion SOAR support direct and automated remediation at scale. Extend investigations with critical context from identity, cloud, mobile and data protection, while incorporating third-party data in the same console.
What are the key features of CrowdStrike Falcon?
What benefits and reported outcomes can organizations achieve?
In technology sectors, CrowdStrike Falcon commonly supports endpoint protection and threat response initiatives, allowing companies to replace traditional antivirus systems with more advanced solutions. In finance, it secures sensitive data across multiple platforms, ensuring compliance. In healthcare, real-time security analysis protects patient data on critical devices like servers and laptops, utilizing AI to enhance cybersecurity defenses.
We monitor all Endpoint Protection Platform (EPP) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.